@mutmutco/cli 2.32.2 → 2.32.4

package/dist/main.cjs

@@ -3392,7 +3392,7 @@ var program = new Command();
 
 // src/index.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_fs14 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 
 // src/rules-sync.ts
 function normalizeEol(s) {
@@ -3423,7 +3423,7 @@ function resolveRulesBase(orgRulesSource, defaultBase) {
 }
 
 // src/index.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 
 // src/cli-shared.ts
 var import_promises = require("node:fs/promises");
@@ -6857,8 +6857,8 @@ async function runNorthstarContext(io, deps) {
 }
 
 // src/index.ts
-var import_node_path13 = require("node:path");
-var import_node_os4 = require("node:os");
+var import_node_path14 = require("node:path");
+var import_node_os5 = require("node:os");
 
 // src/gh-create.ts
 var import_promises4 = require("node:fs/promises");
@@ -8247,6 +8247,126 @@ function decideStage(inputs) {
   return { source: "none", gap, staleIgnored: stale || void 0, staleFields: stale ? staleFields : void 0, registryError: registry2.error };
 }
 
+// src/cursor-plugin-seed.ts
+var import_node_child_process7 = require("node:child_process");
+var import_node_fs11 = require("node:fs");
+var import_node_os4 = require("node:os");
+var import_node_path11 = require("node:path");
+var import_node_util6 = require("node:util");
+function isSemverVersion(v) {
+  return typeof v === "string" && /^v?\d+\.\d+\.\d+/.test(v.trim());
+}
+var MMI_HUB_REPO = "mutmutco/MMI-Hub";
+var CURSOR_THIRD_PARTY_STATE_KEY = "cursor/thirdPartyExtensibilityEnabled";
+var PLUGIN_JSON_REL = ".cursor-plugin/plugin.json";
+var execFileBuffer = (0, import_node_util6.promisify)(import_node_child_process7.execFile);
+function gitFetchReleaseTagArgs(hubCheckout, tag) {
+  return ["-C", hubCheckout, "fetch", "origin", "tag", tag, "--quiet"];
+}
+function ghReleaseTarballApiArgs(tag) {
+  return ["api", `repos/${MMI_HUB_REPO}/tarball/refs/tags/${tag}`];
+}
+function cursorUserGlobalStatePath() {
+  if (process.platform === "win32") {
+    const base2 = process.env.APPDATA || (0, import_node_path11.join)((0, import_node_os4.homedir)(), "AppData", "Roaming");
+    return (0, import_node_path11.join)(base2, "Cursor", "User", "globalStorage", "state.vscdb");
+  }
+  if (process.platform === "darwin") {
+    return (0, import_node_path11.join)((0, import_node_os4.homedir)(), "Library", "Application Support", "Cursor", "User", "globalStorage", "state.vscdb");
+  }
+  return (0, import_node_path11.join)((0, import_node_os4.homedir)(), ".config", "Cursor", "User", "globalStorage", "state.vscdb");
+}
+async function readCursorThirdPartyExtensibilityEnabled(execFileP5) {
+  const dbPath = cursorUserGlobalStatePath();
+  if (!(0, import_node_fs11.existsSync)(dbPath)) return void 0;
+  try {
+    const { stdout } = await execFileP5("sqlite3", [dbPath, `SELECT value FROM ItemTable WHERE key = '${CURSOR_THIRD_PARTY_STATE_KEY}';`], {
+      timeout: 5e3
+    });
+    const value = stdout.trim().toLowerCase();
+    if (value === "true") return true;
+    if (value === "false") return false;
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function syncDirContents(src, dest) {
+  (0, import_node_fs11.mkdirSync)(dest, { recursive: true });
+  for (const name of (0, import_node_fs11.readdirSync)(dest)) {
+    (0, import_node_fs11.rmSync)((0, import_node_path11.join)(dest, name), { recursive: true, force: true });
+  }
+  (0, import_node_fs11.cpSync)(src, dest, { recursive: true });
+}
+function releaseTag(releasedVersion) {
+  return releasedVersion.startsWith("v") ? releasedVersion : `v${releasedVersion}`;
+}
+async function extractPluginMmiFromHubCheckout(hubCheckout, tag, tmpRoot, execFileP5) {
+  const tarFile = (0, import_node_path11.join)(tmpRoot, "archive.tar");
+  try {
+    await execFileP5("git", gitFetchReleaseTagArgs(hubCheckout, tag), { timeout: 6e4 });
+    await execFileP5("git", ["-C", hubCheckout, "archive", "--format=tar", `--output=${tarFile}`, tag, "plugins/mmi"], {
+      timeout: 6e4
+    });
+    await execFileP5("tar", ["-xf", tarFile, "-C", tmpRoot], { timeout: 6e4 });
+    const pluginMmi = (0, import_node_path11.join)(tmpRoot, "plugins", "mmi");
+    return (0, import_node_fs11.existsSync)((0, import_node_path11.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function downloadPluginMmiViaGh(tag, tmpRoot) {
+  const tarPath = (0, import_node_path11.join)(tmpRoot, "repo.tgz");
+  try {
+    (0, import_node_fs11.mkdirSync)(tmpRoot, { recursive: true });
+    const { stdout } = await execFileBuffer("gh", ghReleaseTarballApiArgs(tag), {
+      timeout: 12e4,
+      maxBuffer: 100 * 1024 * 1024,
+      encoding: "buffer",
+      windowsHide: true
+    });
+    (0, import_node_fs11.writeFileSync)(tarPath, stdout);
+    await execFileBuffer("tar", ["-xzf", tarPath, "-C", tmpRoot], { timeout: 12e4, windowsHide: true });
+    const top = (0, import_node_fs11.readdirSync)(tmpRoot).find((entry) => entry !== "repo.tgz");
+    if (!top) return void 0;
+    const pluginMmi = (0, import_node_path11.join)(tmpRoot, top, "plugins", "mmi");
+    return (0, import_node_fs11.existsSync)((0, import_node_path11.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function resolvePluginMmiSource(releasedVersion, hubCheckout, tmpRoot, execFileP5) {
+  (0, import_node_fs11.mkdirSync)(tmpRoot, { recursive: true });
+  const tag = releaseTag(releasedVersion);
+  if (hubCheckout) {
+    const fromHub = await extractPluginMmiFromHubCheckout(hubCheckout, tag, tmpRoot, execFileP5);
+    if (fromHub) return fromHub;
+  }
+  return downloadPluginMmiViaGh(tag, (0, import_node_path11.join)(tmpRoot, "gh"));
+}
+function cursorPluginPinsNeedingSeed(pins, releasedVersion) {
+  if (!isSemverVersion(releasedVersion)) return pins.filter((pin) => !pin.hasPluginJson || !pin.hasHooksJson || pin.isEmpty);
+  return pins.filter((pin) => {
+    if (!pin.hasPluginJson || !pin.hasHooksJson || pin.isEmpty) return true;
+    if (isSemverVersion(pin.version) && compareVersions(pin.version, releasedVersion) < 0) return true;
+    return false;
+  });
+}
+async function applyCursorPluginCacheSeed(input) {
+  if (!isSemverVersion(input.releasedVersion)) return false;
+  const pinsToSeed = cursorPluginPinsNeedingSeed(input.pins, input.releasedVersion);
+  if (pinsToSeed.length === 0) return false;
+  const tmpRoot = await input.mkdtemp("mmi-cursor-seed-");
+  const source = await resolvePluginMmiSource(input.releasedVersion, input.hubCheckout, tmpRoot, input.execFileP);
+  if (!source) return false;
+  input.log(`  \u21BB seeding Cursor MMI plugin cache \u2192 ${input.releasedVersion}\u2026`);
+  for (const pin of pinsToSeed) {
+    syncDirContents(source, pin.path);
+  }
+  (0, import_node_fs11.rmSync)(tmpRoot, { recursive: true, force: true });
+  return true;
+}
+
 // src/bootstrap-seeds.ts
 var PLACEHOLDER_RE = /\{\{([A-Z0-9_]+)\}\}/g;
 function loadBootstrapSeeds(manifestJson) {
@@ -8622,7 +8742,7 @@ var PLUGIN_UPDATE_RECIPES = {
 };
 function highestSemver(versions) {
   return versions.reduce((best, v) => {
-    if (!isSemverVersion(v)) return best;
+    if (!isSemverVersion2(v)) return best;
     if (best === void 0) return v;
     return compareVersions(v, best) > 0 ? v : best;
   }, void 0);
@@ -8633,11 +8753,11 @@ function buildPluginUpdateReport(input) {
   const codexActiveCache = highestSemver(input.codexCacheVersions ?? []);
   return {
     versions: {
-      ...isSemverVersion(input.cliVersion) ? { cli: input.cliVersion } : {},
+      ...isSemverVersion2(input.cliVersion) ? { cli: input.cliVersion } : {},
       ...claudePlugin ? { claudePlugin } : {},
       ...codexMarketplace ? { codexMarketplace } : {},
       ...codexActiveCache ? { codexActiveCache } : {},
-      ...isSemverVersion(input.releasedVersion) ? { released: input.releasedVersion } : {}
+      ...isSemverVersion2(input.releasedVersion) ? { released: input.releasedVersion } : {}
     },
     recipes: PLUGIN_UPDATE_RECIPES
   };
@@ -8667,7 +8787,7 @@ function buildDoctorJsonPayload(input) {
   };
 }
 var INSTALLED_PLUGIN_VERSION_LABEL = "installed MMI plugin version (vs latest release)";
-function isSemverVersion(v) {
+function isSemverVersion2(v) {
   return typeof v === "string" && /^v?\d+\.\d+\.\d+/.test(v.trim());
 }
 function staleRecordCommand(surface) {
@@ -8688,7 +8808,7 @@ function buildInstalledPluginVersionCheck(input) {
     fix: pluginRecoveryFix(input.surface),
     pluginId
   };
-  if (!input.isOrgRepo || !isSemverVersion(input.releasedVersion)) return base2;
+  if (!input.isOrgRepo || !isSemverVersion2(input.releasedVersion)) return base2;
   if (input.surface === "cursor") return base2;
   const stale = [];
   let sawRecord = false;
@@ -8698,7 +8818,7 @@ function buildInstalledPluginVersionCheck(input) {
     if (!Array.isArray(records) || records.length === 0) continue;
     sawRecord = true;
     const installedVersion = bestRecord(records).version;
-    if (!isSemverVersion(installedVersion)) continue;
+    if (!isSemverVersion2(installedVersion)) continue;
     if (compareVersions(installedVersion, input.releasedVersion) >= 0) {
       currentVersion = currentVersion ?? installedVersion;
     } else {
@@ -8730,15 +8850,16 @@ function joinCachePath(root, ...parts) {
 function cursorPluginInstallFix(input) {
   const logHint = "check %APPDATA%\\Cursor\\logs\\<session>\\window*\\exthost\\anysphere.cursor-agent-exec\\Cursor Plugins.*.log for `unable to get password from user`";
   const authSteps = "ensure GitHub SSH auth works for Cursor's background git (start ssh-agent, add your GitHub key, verify `ssh -T git@github.com`) \u2014 Cursor disables credential.helper during marketplace clone";
-  const marketplaceRefresh = "in Cursor Dashboard \u2192 Settings \u2192 Plugins, click Update next to the MMI Team Marketplace, enable MMI, then restart Cursor";
+  const marketplaceRefresh = "when Dashboard \u2192 Settings \u2192 Plugins shows Update next to the MMI Team Marketplace, refresh it there; otherwise run `mmi-cli doctor --apply` to seed the cache from the latest release";
   const guide = `full recovery: ${CURSOR_MARKETPLACE_INSTALL_GUIDE}`;
   if (input.reason === "missing-cache") {
     return `${marketplaceRefresh}; ${authSteps}; ${guide}`;
   }
   const pin = input.pinName ?? "<commit-pin>";
   const cacheDir = joinCachePath(input.cacheRoot, pin);
+  const autoSeed = "run `mmi-cli doctor --apply` to seed plugins/mmi from the latest release into the active pin";
   const localSeed = input.hubCheckout ? `temporary fallback: copy ${joinCachePath(input.hubCheckout, "plugins", "mmi")} to ${cacheDir}, then restart Cursor` : `temporary fallback: copy plugins/mmi from a local MMI-Hub checkout to ${cacheDir}, then restart Cursor`;
-  return `Cursor plugin cache at ${cacheDir} is empty or missing ${CURSOR_PLUGIN_JSON_REL} or ${CURSOR_HOOKS_JSON_REL} \u2014 ${marketplaceRefresh}; ${authSteps}; ${localSeed}; ${logHint}; ${guide}`;
+  return `Cursor plugin cache at ${cacheDir} is empty or missing ${CURSOR_PLUGIN_JSON_REL} or ${CURSOR_HOOKS_JSON_REL} \u2014 ${autoSeed}; ${marketplaceRefresh}; ${authSteps}; ${localSeed}; ${logHint}; ${guide}`;
 }
 function buildCursorPluginInstallCheck(input) {
   const base2 = {
@@ -8776,18 +8897,29 @@ function buildCursorPluginInstallCheck(input) {
       };
     }
   }
-  if (input.surface === "cursor" && isSemverVersion(input.releasedVersion) && input.pins.some((pin) => isSemverVersion(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0)) {
-    const stale = input.pins.filter((pin) => isSemverVersion(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0).map((pin) => `${pin.version} at ${pin.name}`).join(", ");
+  if (input.surface === "cursor" && isSemverVersion2(input.releasedVersion) && input.pins.some((pin) => isSemverVersion2(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0)) {
+    const stale = input.pins.filter((pin) => isSemverVersion2(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0).map((pin) => `${pin.version} at ${pin.name}`).join(", ");
     return {
       ...base2,
       ok: false,
       cacheRoot: input.cacheRoot,
       pins: input.pins,
-      fix: `Cursor MMI plugin cache is behind ${input.releasedVersion} (${stale}) \u2014 in Cursor Dashboard \u2192 Settings \u2192 Plugins, click Update next to the MMI Team Marketplace, enable MMI, then restart Cursor; ${CURSOR_MARKETPLACE_INSTALL_GUIDE}`
+      fix: `Cursor MMI plugin cache is behind ${input.releasedVersion} (${stale}) \u2014 run \`mmi-cli doctor --apply\` to seed the cache from the latest release (effective after restart Cursor); when Dashboard \u2192 Settings \u2192 Plugins shows Update next to the MMI Team Marketplace, a master-admin can refresh the pin there instead; ${CURSOR_MARKETPLACE_INSTALL_GUIDE}`
     };
   }
   return { ...base2, cacheRoot: input.cacheRoot, pins: input.pins };
 }
+var CURSOR_THIRD_PARTY_EXTENSIBILITY_LABEL = "Cursor third-party plugin import";
+var CURSOR_THIRD_PARTY_EXTENSIBILITY_FIX = "disable Cursor Settings \u2192 Rules, Skills, Subagents \u2192 Include third-party Plugins, Skills, and other configs (cursor/thirdPartyExtensibilityEnabled) \u2014 it imports Claude/Codex hooks that break the MMI Team Marketplace plugin; use MMI from the Team Marketplace only, then restart Cursor";
+function buildCursorThirdPartyExtensibilityCheck(input) {
+  const base2 = {
+    ok: true,
+    label: CURSOR_THIRD_PARTY_EXTENSIBILITY_LABEL,
+    fix: CURSOR_THIRD_PARTY_EXTENSIBILITY_FIX
+  };
+  if (!input.isOrgRepo || input.surface !== "cursor" || input.enabled === void 0) return base2;
+  return { ...base2, ok: !input.enabled };
+}
 function buildCursorHookCliCheck(input) {
   const fix = "update the MMI Team Marketplace plugin (releases ship cli/dist under plugins/mmi/cli/dist) or install mmi-cli on PATH \u2014 Cursor hooks fall back to PATH when the bundled CLI is missing";
   const base2 = { ok: true, label: CURSOR_HOOK_CLI_LABEL, fix };
@@ -8936,12 +9068,12 @@ async function runStageLiveDown(deps, t) {
 }
 
 // src/stage-runner.ts
-var import_node_child_process7 = require("node:child_process");
-var import_node_fs11 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_child_process8 = require("node:child_process");
+var import_node_fs12 = require("node:fs");
+var import_node_path12 = require("node:path");
 var import_node_net2 = require("node:net");
-var import_node_util6 = require("node:util");
-var execFileP4 = (0, import_node_util6.promisify)(import_node_child_process7.execFile);
+var import_node_util7 = require("node:util");
+var execFileP4 = (0, import_node_util7.promisify)(import_node_child_process8.execFile);
 var EARLY_EXIT_GRACE_MS = 2e3;
 function waitForProcessStability(child, graceMs = EARLY_EXIT_GRACE_MS) {
   return new Promise((resolve, reject) => {
@@ -8983,7 +9115,7 @@ function detectStaleEnvFile(exampleContent, targetContent, mtimes) {
   return void 0;
 }
 function stageStatePath(cwd = process.cwd()) {
-  return (0, import_node_path11.join)(cwd, "tmp", "stage", "state.json");
+  return (0, import_node_path12.join)(cwd, "tmp", "stage", "state.json");
 }
 var POSIX_ONLY_VERBS = ["cp", "mv", "rm", "ln", "cat", "touch", "chmod", "export"];
 function posixOnlyShellProblems(command, field, platform = process.platform) {
@@ -9045,9 +9177,9 @@ async function shell(command, cwd, timeoutMs) {
   });
 }
 function readState(path2) {
-  if (!(0, import_node_fs11.existsSync)(path2)) return null;
+  if (!(0, import_node_fs12.existsSync)(path2)) return null;
   try {
-    return JSON.parse((0, import_node_fs11.readFileSync)(path2, "utf8"));
+    return JSON.parse((0, import_node_fs12.readFileSync)(path2, "utf8"));
   } catch {
     return null;
   }
@@ -9099,7 +9231,7 @@ async function stopStage(opts = {}) {
     return { ok: true, action: "stop", statePath, message: "no previous stage state found" };
   }
   await killTree(state.pid);
-  (0, import_node_fs11.rmSync)(statePath, { force: true });
+  (0, import_node_fs12.rmSync)(statePath, { force: true });
   return { ok: true, action: "stop", statePath, pid: state.pid, message: `stopped previous stage pid ${state.pid}` };
 }
 async function startStage(config = {}, opts = {}) {
@@ -9108,7 +9240,7 @@ async function startStage(config = {}, opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
   const statePath = opts.statePath ?? stageStatePath(cwd);
   const dir = statePath.slice(0, Math.max(statePath.lastIndexOf("/"), statePath.lastIndexOf("\\")));
-  (0, import_node_fs11.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs12.mkdirSync)(dir, { recursive: true });
   let stagePort;
   if (config.portRange) {
     const [s, e] = config.portRange;
@@ -9118,14 +9250,14 @@ async function startStage(config = {}, opts = {}) {
   }
   const sub = (s) => s != null && stagePort != null ? s.replace(/\$\{?STAGE_PORT\}?/g, String(stagePort)) : s;
   if (config.ensureEnv) {
-    const target = (0, import_node_path11.join)(cwd, config.ensureEnv.target);
-    const example = (0, import_node_path11.join)(cwd, config.ensureEnv.example);
-    if (!(0, import_node_fs11.existsSync)(target) && (0, import_node_fs11.existsSync)(example)) {
-      (0, import_node_fs11.copyFileSync)(example, target);
-    } else if ((0, import_node_fs11.existsSync)(target) && (0, import_node_fs11.existsSync)(example)) {
-      const stale = detectStaleEnvFile((0, import_node_fs11.readFileSync)(example, "utf8"), (0, import_node_fs11.readFileSync)(target, "utf8"), {
-        exampleMtimeMs: (0, import_node_fs11.statSync)(example).mtimeMs,
-        targetMtimeMs: (0, import_node_fs11.statSync)(target).mtimeMs
+    const target = (0, import_node_path12.join)(cwd, config.ensureEnv.target);
+    const example = (0, import_node_path12.join)(cwd, config.ensureEnv.example);
+    if (!(0, import_node_fs12.existsSync)(target) && (0, import_node_fs12.existsSync)(example)) {
+      (0, import_node_fs12.copyFileSync)(example, target);
+    } else if ((0, import_node_fs12.existsSync)(target) && (0, import_node_fs12.existsSync)(example)) {
+      const stale = detectStaleEnvFile((0, import_node_fs12.readFileSync)(example, "utf8"), (0, import_node_fs12.readFileSync)(target, "utf8"), {
+        exampleMtimeMs: (0, import_node_fs12.statSync)(example).mtimeMs,
+        targetMtimeMs: (0, import_node_fs12.statSync)(target).mtimeMs
       });
       if (stale) {
         const msg = `stale ${config.ensureEnv.target} (${stale}) \u2014 delete it or refresh from ${config.ensureEnv.example} before re-running /stage`;
@@ -9137,7 +9269,7 @@ async function startStage(config = {}, opts = {}) {
   const extraEnv = {};
   for (const [k, v] of Object.entries(config.env ?? {})) extraEnv[k] = sub(v) ?? v;
   const up = sub(config.up.trim());
-  const child = (0, import_node_child_process7.spawn)(up, {
+  const child = (0, import_node_child_process8.spawn)(up, {
     cwd,
     shell: true,
     // POSIX-only: the process group exists for the group-kill in stopStage. On win32 teardown is
@@ -9156,13 +9288,13 @@ async function startStage(config = {}, opts = {}) {
     healthUrl: sub(config.healthUrl?.trim()) || void 0,
     port: stagePort
   };
-  (0, import_node_fs11.writeFileSync)(statePath, JSON.stringify(state, null, 2), "utf8");
+  (0, import_node_fs12.writeFileSync)(statePath, JSON.stringify(state, null, 2), "utf8");
   try {
     if (state.healthUrl) await waitForHealth(state.healthUrl, opts.timeoutMs ?? 6e4, config.healthAnyStatus);
     else await waitForProcessStability(child);
   } catch (e) {
     await killTree(state.pid);
-    (0, import_node_fs11.rmSync)(statePath, { force: true });
+    (0, import_node_fs12.rmSync)(statePath, { force: true });
     throw e;
   }
   const result = { ok: true, action: "start", statePath, pid: state.pid, port: stagePort, message: `started stage pid ${state.pid}${stagePort != null ? ` on port ${stagePort}` : ""}` };
@@ -10228,12 +10360,12 @@ async function runTenantRedeploy(deps, options) {
 }
 
 // src/hotfix-coverage.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var CHERRY_TRAILER = /\(cherry picked from commit ([0-9a-f]{7,40})\)/g;
 function checkHotfixCoverage(options = {}) {
   const { cwd = process.cwd(), mainRef = "origin/main", rcRef = "origin/rc", manifestPaths = [] } = options;
   const ack = (options.ack ?? []).filter(Boolean);
-  const git = options.git ?? ((args, opts) => (0, import_node_child_process8.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git = options.git ?? ((args, opts) => (0, import_node_child_process9.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const revList = (range) => {
     const out = git(["rev-list", "--no-merges", range]).trim();
     return out ? out.split("\n") : [];
@@ -10902,7 +11034,7 @@ async function announceRelease(deps, args) {
 }
 
 // src/port-registry.ts
-var import_node_fs12 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 
 // ../infra/port-geometry.mjs
 var PORT_BLOCK = 100;
@@ -10916,8 +11048,8 @@ function nextPortBlock(registry2) {
   return [base2, base2 + PORT_SPAN];
 }
 function loadPortRegistry(path2) {
-  if (!(0, import_node_fs12.existsSync)(path2)) return {};
-  const raw = JSON.parse((0, import_node_fs12.readFileSync)(path2, "utf8"));
+  if (!(0, import_node_fs13.existsSync)(path2)) return {};
+  const raw = JSON.parse((0, import_node_fs13.readFileSync)(path2, "utf8"));
   const out = {};
   for (const [key, value] of Object.entries(raw)) {
     if (Array.isArray(value) && value.length === 2 && value.every((n) => typeof n === "number")) {
@@ -10931,9 +11063,9 @@ function ensurePortRange(repo, path2) {
   const existing = registry2[repo];
   if (existing) return existing;
   const range = nextPortBlock(registry2);
-  const raw = (0, import_node_fs12.existsSync)(path2) ? JSON.parse((0, import_node_fs12.readFileSync)(path2, "utf8")) : {};
+  const raw = (0, import_node_fs13.existsSync)(path2) ? JSON.parse((0, import_node_fs13.readFileSync)(path2, "utf8")) : {};
   raw[repo] = range;
-  (0, import_node_fs12.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
+  (0, import_node_fs13.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
   return range;
 }
 function portCursorSeed(registry2) {
@@ -12719,10 +12851,10 @@ function parseKbTree(stdout, prefix) {
 }
 
 // src/plan.ts
-var import_node_path12 = require("node:path");
+var import_node_path13 = require("node:path");
 var PLANS_DIR = "plans";
-var META_FILE = (0, import_node_path12.join)(PLANS_DIR, ".plan-meta.json");
-var planPath = (slug) => (0, import_node_path12.join)(PLANS_DIR, `${slug}.md`);
+var META_FILE = (0, import_node_path13.join)(PLANS_DIR, ".plan-meta.json");
+var planPath = (slug) => (0, import_node_path13.join)(PLANS_DIR, `${slug}.md`);
 var metaKey = (project2, slug) => `${project2}/${slug}`;
 function parseMeta(raw) {
   if (!raw) return {};
@@ -12747,7 +12879,7 @@ function hashContent(s) {
 function staleHint(slug) {
   return `remote "${slug}" is newer \u2014 run \`mmi-cli northstar pull ${slug}\` first (your local is based on an older version), or re-push with \`--force\` to overwrite`;
 }
-var INDEX_FILE = (0, import_node_path12.join)(PLANS_DIR, ".index.json");
+var INDEX_FILE = (0, import_node_path13.join)(PLANS_DIR, ".index.json");
 var INDEX_TTL_MS = 6e4;
 function parseIndex(raw) {
   if (!raw) return null;
@@ -12776,7 +12908,7 @@ function mergeIndex(idx, scope, plans, now) {
   const mergedScope = idx.scope === null ? null : [.../* @__PURE__ */ new Set([...idx.scope, ...scope])];
   return { fetchedAt: now, scope: mergedScope, plans: [...kept, ...plans] };
 }
-var QUEUE_FILE = (0, import_node_path12.join)(PLANS_DIR, ".sync-queue.json");
+var QUEUE_FILE = (0, import_node_path13.join)(PLANS_DIR, ".sync-queue.json");
 var QUEUE_MAX_ATTEMPTS = 10;
 function isValidQueueEntry(e) {
   if (!e || typeof e !== "object") return false;
@@ -13225,11 +13357,11 @@ async function planGraduate(deps, slug, opts = {}) {
 }
 
 // src/atomic-write.ts
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 function atomicWriteFileSync(path2, content) {
   const tmp = `${path2}.${process.pid}.tmp`;
-  (0, import_node_fs13.writeFileSync)(tmp, content, "utf8");
-  (0, import_node_fs13.renameSync)(tmp, path2);
+  (0, import_node_fs14.writeFileSync)(tmp, content, "utf8");
+  (0, import_node_fs14.renameSync)(tmp, path2);
 }
 
 // src/oauth.ts
@@ -13460,7 +13592,7 @@ async function fetchHubVersionInfo(baseUrl) {
 }
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path13.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path14.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -13570,10 +13702,10 @@ async function runRulesSync(opts, io = consoleIo) {
   for (const entry of fetched) {
     if ("error" in entry) continue;
     const { file, source } = entry;
-    const current = (0, import_node_fs14.existsSync)(file) ? await (0, import_promises5.readFile)(file, "utf8") : null;
+    const current = (0, import_node_fs15.existsSync)(file) ? await (0, import_promises5.readFile)(file, "utf8") : null;
     if (needsUpdate(source, current)) {
       const slash = file.lastIndexOf("/");
-      if (slash > 0) (0, import_node_fs14.mkdirSync)(file.slice(0, slash), { recursive: true });
+      if (slash > 0) (0, import_node_fs15.mkdirSync)(file.slice(0, slash), { recursive: true });
       await (0, import_promises5.writeFile)(file, normalizeEol(source), "utf8");
       changed++;
       if (!opts.quiet) io.log(`mmi-cli rules: updated ${file}`);
@@ -13599,7 +13731,7 @@ async function runDocsSync(opts, io = consoleIo) {
         return null;
       }
     },
-    localContent: async (f) => (0, import_node_fs14.existsSync)(f) ? await (0, import_promises5.readFile)(f, "utf8") : null,
+    localContent: async (f) => (0, import_node_fs15.existsSync)(f) ? await (0, import_promises5.readFile)(f, "utf8") : null,
     writeDoc: async (f, c) => {
       await (0, import_promises5.writeFile)(f, c, "utf8");
     }
@@ -13748,7 +13880,7 @@ function scheduleRelatedDiscovery(o) {
   try {
     const args = ["issue", "discover-related", "--number", String(o.number), "--title", o.title, "--body", o.body];
     if (o.repo) args.push("--repo", o.repo);
-    (0, import_node_child_process9.spawn)(process.execPath, [process.argv[1], ...args], {
+    (0, import_node_child_process10.spawn)(process.execPath, [process.argv[1], ...args], {
       detached: true,
       stdio: "ignore",
       windowsHide: true,
@@ -13762,7 +13894,7 @@ function detachPlanSync() {
   if (planSyncDetached) return;
   planSyncDetached = true;
   try {
-    (0, import_node_child_process9.spawn)(process.execPath, [process.argv[1], "northstar", "sync", "--quiet"], {
+    (0, import_node_child_process10.spawn)(process.execPath, [process.argv[1], "northstar", "sync", "--quiet"], {
       detached: true,
       stdio: "ignore",
       windowsHide: true,
@@ -13772,7 +13904,7 @@ function detachPlanSync() {
   }
 }
 function makePlanDeps(cfg, io = consoleIo) {
-  const ensureDir = () => (0, import_node_fs14.mkdirSync)(PLANS_DIR, { recursive: true });
+  const ensureDir = () => (0, import_node_fs15.mkdirSync)(PLANS_DIR, { recursive: true });
   return {
     apiUrl: cfg.sagaApiUrl,
     fetch: (url, init = {}) => fetch(url, { ...init, signal: init.signal ?? AbortSignal.timeout(1e4) }),
@@ -13780,24 +13912,24 @@ function makePlanDeps(cfg, io = consoleIo) {
     project: async () => (await sagaKey(cfg)).project,
     readLocal: (slug) => {
       try {
-        return (0, import_node_fs14.readFileSync)(planPath(slug), "utf8");
+        return (0, import_node_fs15.readFileSync)(planPath(slug), "utf8");
       } catch {
         return null;
       }
     },
     writeLocal: (slug, content) => {
       ensureDir();
-      (0, import_node_fs14.writeFileSync)(planPath(slug), content, "utf8");
+      (0, import_node_fs15.writeFileSync)(planPath(slug), content, "utf8");
     },
     removeLocal: (slug) => {
       try {
-        (0, import_node_fs14.rmSync)(planPath(slug));
+        (0, import_node_fs15.rmSync)(planPath(slug));
       } catch {
       }
     },
     readMetaRaw: () => {
       try {
-        return (0, import_node_fs14.readFileSync)(META_FILE, "utf8");
+        return (0, import_node_fs15.readFileSync)(META_FILE, "utf8");
       } catch {
         return null;
       }
@@ -13808,7 +13940,7 @@ function makePlanDeps(cfg, io = consoleIo) {
     },
     readIndexRaw: () => {
       try {
-        return (0, import_node_fs14.readFileSync)(INDEX_FILE, "utf8");
+        return (0, import_node_fs15.readFileSync)(INDEX_FILE, "utf8");
       } catch {
         return null;
       }
@@ -13819,7 +13951,7 @@ function makePlanDeps(cfg, io = consoleIo) {
     },
     readQueueRaw: () => {
       try {
-        return (0, import_node_fs14.readFileSync)(QUEUE_FILE, "utf8");
+        return (0, import_node_fs15.readFileSync)(QUEUE_FILE, "utf8");
       } catch {
         return null;
       }
@@ -13841,7 +13973,7 @@ function openInEditor(path2) {
     return;
   }
   try {
-    (0, import_node_child_process9.spawn)(editor, [path2], { stdio: "inherit" });
+    (0, import_node_child_process10.spawn)(editor, [path2], { stdio: "inherit" });
   } catch {
     console.log(`open ${path2} manually`);
   }
@@ -14675,7 +14807,7 @@ async function createDeferredWorktreeStore() {
       },
       write: async (entries) => {
         try {
-          await (0, import_promises5.mkdir)((0, import_node_path13.dirname)(registryPath), { recursive: true });
+          await (0, import_promises5.mkdir)((0, import_node_path14.dirname)(registryPath), { recursive: true });
           await (0, import_promises5.writeFile)(registryPath, serializeDeferredWorktrees(entries), "utf8");
         } catch {
         }
@@ -14694,7 +14826,7 @@ function worktreeRemoveDeps(execGit) {
 }
 function teardownWorktreeStage(worktreePath) {
   return runWorktreeStageTeardown(worktreePath, {
-    hasStageState: (wt) => (0, import_node_fs14.existsSync)(stageStatePath(wt)),
+    hasStageState: (wt) => (0, import_node_fs15.existsSync)(stageStatePath(wt)),
     stopRecordedStage: async (wt) => (await stopStage({ cwd: wt })).pid,
     listComposeProjects: async () => {
       const { stdout } = await execFileP2("docker", ["compose", "ls", "--all", "--format", "json"], { timeout: GC_GH_TIMEOUT_MS });
@@ -14757,7 +14889,7 @@ pr.command("merge <number>").description("merge a PR (squash by default) and cle
     } : await cleanupPrMergeLocalBranch(headRef, {
       beforeWorktrees,
       startingPath,
-      pathExists: (p) => (0, import_node_fs14.existsSync)(p),
+      pathExists: (p) => (0, import_node_fs15.existsSync)(p),
       execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
       teardownWorktreeStage,
       deferredStore,
@@ -14910,7 +15042,7 @@ function rawValues(flag) {
   return out;
 }
 function printLine(value) {
-  (0, import_node_fs14.writeSync)(1, `${value}
+  (0, import_node_fs15.writeSync)(1, `${value}
 `);
 }
 function stageKeepAlive() {
@@ -14927,8 +15059,8 @@ async function resolveStage() {
     local,
     shell: shellFor(),
     registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-    hasCompose: (0, import_node_fs14.existsSync)((0, import_node_path13.join)(process.cwd(), "docker-compose.yml")),
-    hasEnvExample: (0, import_node_fs14.existsSync)((0, import_node_path13.join)(process.cwd(), ".env.example"))
+    hasCompose: (0, import_node_fs15.existsSync)((0, import_node_path14.join)(process.cwd(), "docker-compose.yml")),
+    hasEnvExample: (0, import_node_fs15.existsSync)((0, import_node_path14.join)(process.cwd(), ".env.example"))
   });
 }
 function stageStepsFor(res, stops = true) {
@@ -14964,9 +15096,9 @@ program2.command("port-range <repo>").description("assign (idempotently) + print
     printLine(o.json ? JSON.stringify({ repo, portRange: [start2, end2], source: "meta" }) : `${repo}: stage.portRange [${start2}, ${end2}]`);
     return;
   }
-  const path2 = (0, import_node_path13.join)(process.cwd(), "infra", "port-ranges.json");
+  const path2 = (0, import_node_path14.join)(process.cwd(), "infra", "port-ranges.json");
   const allocate = async (seed) => {
-    const { stdout } = await execFileP2("node", [(0, import_node_path13.join)(process.cwd(), "infra", "port-ddb.mjs"), String(seed)], { timeout: 15e3 });
+    const { stdout } = await execFileP2("node", [(0, import_node_path14.join)(process.cwd(), "infra", "port-ddb.mjs"), String(seed)], { timeout: 15e3 });
     const parsed = JSON.parse(stdout);
     if (!Array.isArray(parsed.range) || parsed.range.length !== 2) throw new Error("port-ddb: no range in output");
     return parsed.range;
@@ -15300,7 +15432,7 @@ bootstrap.command("verify <repo>").description("audit whether an existing repo i
   const report = await verifyBootstrap(repo, o.class, {
     client: defaultGitHubClient(),
     projectMeta: meta,
-    readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs14.existsSync)(path2) ? (0, import_node_fs14.readFileSync)(path2, "utf8") : null,
+    readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs15.existsSync)(path2) ? (0, import_node_fs15.readFileSync)(path2, "utf8") : null,
     // requiredGcpApis is stored as an array by a JSON write, but `project set --var KEY=VALUE` stores a raw
     // comma-string — accept either so the seeded value verifies regardless of how it was written.
     requiredGcpApis: (() => {
@@ -15343,12 +15475,12 @@ bootstrap.command("apply <repo>").description("idempotent seed apply from skills
     return fail(`bootstrap apply: ${e.message}`);
   }
   const manifestPath = "skills/bootstrap/seeds/manifest.json";
-  if (!(0, import_node_fs14.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; run from the MMI-Hub repo root`);
-  const manifest = loadBootstrapSeeds((0, import_node_fs14.readFileSync)(manifestPath, "utf8"));
+  if (!(0, import_node_fs15.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; run from the MMI-Hub repo root`);
+  const manifest = loadBootstrapSeeds((0, import_node_fs15.readFileSync)(manifestPath, "utf8"));
   const baseBranch = o.class === "content" ? "main" : "development";
   const slug = parsedRepo.slug;
   const gh = async (args) => execFileP2("gh", args, { timeout: 2e4 });
-  const readFile5 = (p) => (0, import_node_fs14.existsSync)(p) ? (0, import_node_fs14.readFileSync)(p, "utf8") : null;
+  const readFile5 = (p) => (0, import_node_fs15.existsSync)(p) ? (0, import_node_fs15.readFileSync)(p, "utf8") : null;
   const enc2 = (p) => p.split("/").map(encodeURIComponent).join("/");
   const rawVars = {};
   for (const value of rawValues("--var")) {
@@ -15557,16 +15689,16 @@ access.command("audit").description("audit collaborator roles + train-branch pus
     if (o.class !== "deployable" && o.class !== "content") return failGraceful("access audit: --class must be deployable or content");
     targets = [{ repo: o.repo, class: o.class }];
   } else {
-    const projectsJson = registryProjects ? JSON.stringify({ projects: registryProjects }) : (0, import_node_fs14.existsSync)("projects.json") ? (0, import_node_fs14.readFileSync)("projects.json", "utf8") : null;
+    const projectsJson = registryProjects ? JSON.stringify({ projects: registryProjects }) : (0, import_node_fs15.existsSync)("projects.json") ? (0, import_node_fs15.readFileSync)("projects.json", "utf8") : null;
     if (!projectsJson) return failGraceful("access audit: no project registry \u2014 Hub API unreachable and projects.json not found; run from the MMI-Hub repo root or pass --repo <owner/repo>");
-    const fanoutJson = (0, import_node_fs14.existsSync)(".github/fanout-targets.json") ? (0, import_node_fs14.readFileSync)(".github/fanout-targets.json", "utf8") : null;
+    const fanoutJson = (0, import_node_fs15.existsSync)(".github/fanout-targets.json") ? (0, import_node_fs15.readFileSync)(".github/fanout-targets.json", "utf8") : null;
     targets = loadAccessTargets(projectsJson, fanoutJson);
   }
   const derivedMatrix = registryProjects ? accessMatrixFromProjects(registryProjects) : {};
-  const fileMatrix = (0, import_node_fs14.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs14.readFileSync)("access-matrix.json", "utf8")) : {};
+  const fileMatrix = (0, import_node_fs15.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs15.readFileSync)("access-matrix.json", "utf8")) : {};
   const matrix = mergeAccessMatrix(fileMatrix, derivedMatrix);
   const derivedContracts = registryProjects ? dataAccessContractsFromProjects(registryProjects) : { consumers: {} };
-  const fileContracts = (0, import_node_fs14.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs14.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
+  const fileContracts = (0, import_node_fs15.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs15.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
   const dataAccess = mergeDataAccessContracts(fileContracts, derivedContracts);
   const report = await auditOrgAccess(targets, deps, matrix, dataAccess);
   console.log(o.json ? JSON.stringify(report, null, 2) : renderAccessReport(report));
@@ -15575,20 +15707,20 @@ access.command("audit").description("audit collaborator roles + train-branch pus
 var isWin = process.platform === "win32";
 var installedPluginsPath = (surface = detectSurface(process.env)) => {
   const homeDir = surface === "codex" ? ".codex" : ".claude";
-  return (0, import_node_path13.join)((0, import_node_os4.homedir)(), homeDir, "plugins", "installed_plugins.json");
+  return (0, import_node_path14.join)((0, import_node_os5.homedir)(), homeDir, "plugins", "installed_plugins.json");
 };
 function readInstalledPlugins() {
   try {
-    return JSON.parse((0, import_node_fs14.readFileSync)(installedPluginsPath(), "utf8"));
+    return JSON.parse((0, import_node_fs15.readFileSync)(installedPluginsPath(), "utf8"));
   } catch {
     return null;
   }
 }
 function installedPluginSources() {
   return ["claude", "codex"].map((surface) => {
-    const recordPath = (0, import_node_path13.join)((0, import_node_os4.homedir)(), `.${surface}`, "plugins", "installed_plugins.json");
+    const recordPath = (0, import_node_path14.join)((0, import_node_os5.homedir)(), `.${surface}`, "plugins", "installed_plugins.json");
     try {
-      return { surface, installed: JSON.parse((0, import_node_fs14.readFileSync)(recordPath, "utf8")), recordPath };
+      return { surface, installed: JSON.parse((0, import_node_fs15.readFileSync)(recordPath, "utf8")), recordPath };
     } catch {
       return { surface, installed: null, recordPath };
     }
@@ -15596,7 +15728,7 @@ function installedPluginSources() {
 }
 function readClaudeSettings() {
   try {
-    return JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path13.join)(process.cwd(), ".claude", "settings.json"), "utf8"));
+    return JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path14.join)(process.cwd(), ".claude", "settings.json"), "utf8"));
   } catch {
     return null;
   }
@@ -15618,7 +15750,7 @@ function writeProjectInstallRecord(record) {
     const list = file.plugins[MMI_PLUGIN_ID] ?? [];
     list.push(record);
     file.plugins[MMI_PLUGIN_ID] = list;
-    (0, import_node_fs14.writeFileSync)(installedPluginsPath(), `${JSON.stringify(file, null, 2)}
+    (0, import_node_fs15.writeFileSync)(installedPluginsPath(), `${JSON.stringify(file, null, 2)}
 `, "utf8");
     return true;
   } catch {
@@ -15631,9 +15763,9 @@ function backupAndWriteInstalledPlugins(records, pluginId) {
     if (!file) return false;
     if (!file.plugins) file.plugins = {};
     const path2 = installedPluginsPath();
-    (0, import_node_fs14.copyFileSync)(path2, `${path2}.bak`);
+    (0, import_node_fs15.copyFileSync)(path2, `${path2}.bak`);
     file.plugins[pluginId] = records;
-    (0, import_node_fs14.writeFileSync)(path2, `${JSON.stringify(file, null, 2)}
+    (0, import_node_fs15.writeFileSync)(path2, `${JSON.stringify(file, null, 2)}
 `, "utf8");
     return true;
   } catch {
@@ -15641,35 +15773,35 @@ function backupAndWriteInstalledPlugins(records, pluginId) {
   }
 }
 function cursorPluginCacheRoot() {
-  return (0, import_node_path13.join)((0, import_node_os4.homedir)(), ".cursor", "plugins", "cache", "mmi", "mmi");
+  return (0, import_node_path14.join)((0, import_node_os5.homedir)(), ".cursor", "plugins", "cache", "mmi", "mmi");
 }
 function cursorPluginCachePinSnapshots() {
   const root = cursorPluginCacheRoot();
   try {
-    return (0, import_node_fs14.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => {
-      const path2 = (0, import_node_path13.join)(root, entry.name);
-      const pluginJson = (0, import_node_path13.join)(path2, ".cursor-plugin", "plugin.json");
-      const hooksJson = (0, import_node_path13.join)(path2, "hooks", "hooks.json");
-      const cliBundle = (0, import_node_path13.join)(path2, "cli", "dist", "index.cjs");
+    return (0, import_node_fs15.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => {
+      const path2 = (0, import_node_path14.join)(root, entry.name);
+      const pluginJson = (0, import_node_path14.join)(path2, ".cursor-plugin", "plugin.json");
+      const hooksJson = (0, import_node_path14.join)(path2, "hooks", "hooks.json");
+      const cliBundle = (0, import_node_path14.join)(path2, "cli", "dist", "index.cjs");
       let version;
       try {
-        const raw = JSON.parse((0, import_node_fs14.readFileSync)(pluginJson, "utf8"));
+        const raw = JSON.parse((0, import_node_fs15.readFileSync)(pluginJson, "utf8"));
         version = typeof raw.version === "string" ? raw.version : void 0;
       } catch {
         version = void 0;
       }
       let isEmpty = true;
       try {
-        isEmpty = (0, import_node_fs14.readdirSync)(path2).length === 0;
+        isEmpty = (0, import_node_fs15.readdirSync)(path2).length === 0;
       } catch {
         isEmpty = true;
       }
       return {
         name: entry.name,
         path: path2,
-        hasPluginJson: (0, import_node_fs14.existsSync)(pluginJson),
-        hasHooksJson: (0, import_node_fs14.existsSync)(hooksJson),
-        hasCliBundle: (0, import_node_fs14.existsSync)(cliBundle),
+        hasPluginJson: (0, import_node_fs15.existsSync)(pluginJson),
+        hasHooksJson: (0, import_node_fs15.existsSync)(hooksJson),
+        hasCliBundle: (0, import_node_fs15.existsSync)(cliBundle),
         isEmpty,
         version
       };
@@ -15679,19 +15811,19 @@ function cursorPluginCachePinSnapshots() {
   }
 }
 function hubCheckoutForCursorSeed() {
-  const manifest = (0, import_node_path13.join)(process.cwd(), "plugins", "mmi", ".cursor-plugin", "plugin.json");
-  return (0, import_node_fs14.existsSync)(manifest) ? process.cwd() : void 0;
+  const manifest = (0, import_node_path14.join)(process.cwd(), "plugins", "mmi", ".cursor-plugin", "plugin.json");
+  return (0, import_node_fs15.existsSync)(manifest) ? process.cwd() : void 0;
 }
 function mmiPluginCacheRootSnapshots() {
   const roots = [
-    { surface: "claude", root: (0, import_node_path13.join)((0, import_node_os4.homedir)(), ".claude", "plugins", "cache", "mmi", "mmi") },
-    { surface: "codex", root: (0, import_node_path13.join)((0, import_node_os4.homedir)(), ".codex", "plugins", "cache", "mmi", "mmi") }
+    { surface: "claude", root: (0, import_node_path14.join)((0, import_node_os5.homedir)(), ".claude", "plugins", "cache", "mmi", "mmi") },
+    { surface: "codex", root: (0, import_node_path14.join)((0, import_node_os5.homedir)(), ".codex", "plugins", "cache", "mmi", "mmi") }
   ];
   return roots.flatMap(({ surface, root }) => {
     try {
-      const entries = (0, import_node_fs14.readdirSync)(root, { withFileTypes: true }).map((entry) => ({
+      const entries = (0, import_node_fs15.readdirSync)(root, { withFileTypes: true }).map((entry) => ({
         name: entry.name,
-        path: (0, import_node_path13.join)(root, entry.name),
+        path: (0, import_node_path14.join)(root, entry.name),
         isDirectory: entry.isDirectory()
       }));
       return [{ surface, root, entries }];
@@ -15702,7 +15834,7 @@ function mmiPluginCacheRootSnapshots() {
 }
 function hasNestedMmiChild(versionDir) {
   try {
-    return (0, import_node_fs14.statSync)((0, import_node_path13.join)(versionDir, "mmi")).isDirectory();
+    return (0, import_node_fs15.statSync)((0, import_node_path14.join)(versionDir, "mmi")).isDirectory();
   } catch {
     return false;
   }
@@ -15713,10 +15845,10 @@ function nestedPluginTreeSnapshot() {
   );
 }
 function uniqueQuarantineTarget(path2) {
-  if (!(0, import_node_fs14.existsSync)(path2)) return path2;
+  if (!(0, import_node_fs15.existsSync)(path2)) return path2;
   for (let i = 1; i < 100; i += 1) {
     const candidate = `${path2}-${i}`;
-    if (!(0, import_node_fs14.existsSync)(candidate)) return candidate;
+    if (!(0, import_node_fs15.existsSync)(candidate)) return candidate;
   }
   return `${path2}-${Date.now()}`;
 }
@@ -15724,32 +15856,32 @@ function quarantinePluginCacheDirs(plan2) {
   let moved = 0;
   for (const move of plan2) {
     try {
-      if (!(0, import_node_fs14.existsSync)(move.from)) continue;
+      if (!(0, import_node_fs15.existsSync)(move.from)) continue;
       const target = uniqueQuarantineTarget(move.to);
-      (0, import_node_fs14.mkdirSync)((0, import_node_path13.dirname)(target), { recursive: true });
-      (0, import_node_fs14.renameSync)(move.from, target);
+      (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(target), { recursive: true });
+      (0, import_node_fs15.renameSync)(move.from, target);
       moved += 1;
     } catch {
     }
   }
   return moved;
 }
-var gitignorePath = () => (0, import_node_path13.join)(process.cwd(), ".gitignore");
+var gitignorePath = () => (0, import_node_path14.join)(process.cwd(), ".gitignore");
 function readTextFile(path2) {
   try {
-    if (!(0, import_node_fs14.existsSync)(path2)) return null;
-    return (0, import_node_fs14.readFileSync)(path2, "utf8");
+    if (!(0, import_node_fs15.existsSync)(path2)) return null;
+    return (0, import_node_fs15.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
 }
 function playwrightMcpConfigSnapshots() {
   const cwd = process.cwd();
-  const home = (0, import_node_os4.homedir)();
+  const home = (0, import_node_os5.homedir)();
   const candidates = [
-    (0, import_node_path13.join)(cwd, ".cursor", "mcp.json"),
-    (0, import_node_path13.join)(home, ".cursor", "mcp.json"),
-    (0, import_node_path13.join)(home, ".codex", "config.toml")
+    (0, import_node_path14.join)(cwd, ".cursor", "mcp.json"),
+    (0, import_node_path14.join)(home, ".cursor", "mcp.json"),
+    (0, import_node_path14.join)(home, ".codex", "config.toml")
   ];
   const out = [];
   for (const path2 of candidates) {
@@ -15762,7 +15894,7 @@ function strayBrowserArtifactPaths() {
   const cwd = process.cwd();
   return STRAY_BROWSER_ARTIFACT_DIRS.filter((rel) => {
     try {
-      return (0, import_node_fs14.existsSync)((0, import_node_path13.join)(cwd, rel));
+      return (0, import_node_fs15.existsSync)((0, import_node_path14.join)(cwd, rel));
     } catch {
       return false;
     }
@@ -15770,14 +15902,14 @@ function strayBrowserArtifactPaths() {
 }
 function readGitignore() {
   try {
-    return (0, import_node_fs14.readFileSync)(gitignorePath(), "utf8");
+    return (0, import_node_fs15.readFileSync)(gitignorePath(), "utf8");
   } catch {
     return null;
   }
 }
 function writeGitignore(content) {
   try {
-    (0, import_node_fs14.writeFileSync)(gitignorePath(), content, "utf8");
+    (0, import_node_fs15.writeFileSync)(gitignorePath(), content, "utf8");
     return true;
   } catch {
     return false;
@@ -15816,7 +15948,7 @@ async function runDoctor(opts, io = consoleIo) {
   let onPath = pathProbe;
   if (!onPath) {
     const root = process.env.CLAUDE_PLUGIN_ROOT;
-    if (root && (0, import_node_fs14.existsSync)(`${root}/bin/mmi-cli${isWin ? ".cmd" : ""}`)) onPath = true;
+    if (root && (0, import_node_fs15.existsSync)(`${root}/bin/mmi-cli${isWin ? ".cmd" : ""}`)) onPath = true;
   }
   checks.push({ ok: onPath, label: "mmi-cli on PATH", fix: "auto-provisioned at session start \u2014 reopen the session, or install the MMI plugin" });
   const surface = detectSurface(process.env);
@@ -15945,18 +16077,50 @@ async function runDoctor(opts, io = consoleIo) {
     })
   );
   const cursorCacheRoot = cursorPluginCacheRoot();
+  let cursorPins = cursorPluginCachePinSnapshots() ?? [];
+  let cursorPluginCheck = buildCursorPluginInstallCheck({
+    isOrgRepo: Boolean(cfg.sagaApiUrl),
+    surface,
+    cacheRoot: cursorCacheRoot,
+    cacheRootExists: (0, import_node_fs15.existsSync)(cursorCacheRoot),
+    pins: cursorPins,
+    hubCheckout: hubCheckoutForCursorSeed(),
+    releasedVersion
+  });
+  if (!cursorPluginCheck.ok && repairLocal) {
+    const seeded = await applyCursorPluginCacheSeed({
+      pins: cursorPins,
+      releasedVersion,
+      hubCheckout: hubCheckoutForCursorSeed(),
+      execFileP: execFileP2,
+      mkdtemp: (prefix) => (0, import_promises5.mkdtemp)((0, import_node_path14.join)((0, import_node_os5.tmpdir)(), prefix)),
+      log: (m) => io.err(m)
+    });
+    if (seeded) {
+      cursorPins = cursorPluginCachePinSnapshots() ?? [];
+      cursorPluginCheck = buildCursorPluginInstallCheck({
+        isOrgRepo: Boolean(cfg.sagaApiUrl),
+        surface,
+        cacheRoot: cursorCacheRoot,
+        cacheRootExists: (0, import_node_fs15.existsSync)(cursorCacheRoot),
+        pins: cursorPins,
+        hubCheckout: hubCheckoutForCursorSeed(),
+        releasedVersion
+      });
+      if (cursorPluginCheck.ok) {
+        io.err(`  \u21BB seeded Cursor MMI plugin cache \u2192 ${releasedVersion ?? "latest"} \u2014 ${reloadAction(surface)}`);
+      }
+    }
+  }
+  checks.push(cursorPluginCheck);
+  const cursorThirdPartyEnabled = await readCursorThirdPartyExtensibilityEnabled(execFileP2);
   checks.push(
-    buildCursorPluginInstallCheck({
+    buildCursorThirdPartyExtensibilityCheck({
       isOrgRepo: Boolean(cfg.sagaApiUrl),
       surface,
-      cacheRoot: cursorCacheRoot,
-      cacheRootExists: (0, import_node_fs14.existsSync)(cursorCacheRoot),
-      pins: cursorPluginCachePinSnapshots() ?? [],
-      hubCheckout: hubCheckoutForCursorSeed(),
-      releasedVersion
+      enabled: cursorThirdPartyEnabled
     })
   );
-  const cursorPins = cursorPluginCachePinSnapshots() ?? [];
   checks.push(
     buildCursorHookCliCheck({
       isOrgRepo: Boolean(cfg.sagaApiUrl),
@@ -16016,7 +16180,7 @@ program2.command("session-start").description("run the SessionStart verbs (rules
   } catch (e) {
     console.error(`[mmi-hook] saga session failed: ${e.message}`);
   }
-  spawnDetachedSelf(["docs", "sync", "--quiet"], { spawn: import_node_child_process9.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+  spawnDetachedSelf(["docs", "sync", "--quiet"], { spawn: import_node_child_process10.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
   let northstarInjected = false;
   const { parallel, sequential } = buildSessionStartPlan({
     rulesSync: (io) => runRulesSync({ quiet: true }, io),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "2.32.2",
+  "version": "2.32.4",
   "description": "MMI Future CLI — delivers the org rules (whole-file), plus saga and KB access. The cross-IDE engine the plugin's SessionStart hook drives.",
   "type": "module",
   "license": "UNLICENSED",